Company Policy

Definition of the Policy

The information security management system Policy is the foundational document of the Information Security Management System (ISMS) and is defined by the company's top management in cooperation with our co-workers. Our goal is to achieve a long-term sustainable business, maximizing customer satisfaction while respecting the needs of our co-workers and stakeholders.

Management Statement

In accordance with the requirements of ISO/IEC 27001 standard, The company's management has declared the ITSM Policy as its commitment. Management's intention is to adhere to the principles of the ISMS Policy and the ISMS system as such. Furthermore, it supports ISMS goals based on the Company's Strategy and Vision, ensures appropriate processes necessary for ISMS management and constantly improves this system.

Goals of the Policy

The main goals of the Policy are:

• Declare information security as one of the basic pillars of the company's governance.
• Define basic measures and rules for ensuring information security in the company.
• Identify competencies, responsibilities and provide adequate resources.
• Continuously develop and improve the information security management system.

Basic Information

We define information security as ensuring the confidentiality, integrity and availability of information, information systems and assets in any form.

This policy and its associated documents apply to all co-workers of the company and third parties who access, process or otherwise handle information assets.

The subject of protection includes all information assets of the company, regardless of their form, method of storage or place of processing. Information assets that have been provided to the company by third parties are also subject to protection.

Key Principles

The company's Information Security Management System is based on the following measures and principles:

• Organization of information security.
• Human resources security, security awareness and the security of suppliers relationships.
• Asset and risk management.
• Access control and users responsibilities.
• Physical security.
• Equipment and communication security.
• Operations security.
• Secure software development life cycle (SSDLC).
• Incident management.
• Business continuity management.
• Personal data protection.
• Compliance with legal requirements and best practices.

The company applies all controls of the Annex A of ISO/IEC 27001 (SoA). Individual measures and processes are defined in the following internal documents and comply with this Policy. The scope is defined in the Statement of Applicability.

These key principles also define the Code of Conduct, which is binding for all company's co-workers. The main purpose of this Code of Conduct is to adhere to generally accepted ethical principles, refrain from any type of infringement, reduce the risk of criminal liability for the company, as well as prevent the commission of crime.

Competencies and review of the ISMS Policy

The ISMS Policy is reviewed annually by the company's top management as part of continuous improvement.

The ISMS manager is entrusted with the management of information security. The ISMS manager has the appropriate resources allocated to him and is directly responsible for the company's management.

Definition of the Policy

The IT Service Management System Policy is the foundational document of the IT Service Management System (ITSM) and is defined by the company's top management in cooperation with our co-workers. Our goal is to achieve a long-term sustainable business, maximizing customer satisfaction while respecting the needs of our co-workers and stakeholders.

Management Statement

In accordance with the requirements of the ISO/IEC 20000-1 standard, The company's management has declared the ITSM Policy as its commitment. Management's intention is to adhere to the principles of the ITSM Policy and the ITSM system as such. Furthermore, it supports ITSM based on the Company's Strategy and Vision, ensures appropriate processes necessary for ITSM management and constantly improves this system.

Goals of the Policy

The main goals of the Policy are:

• Improving the quality of IT services.
• Optimizing processes and workflows.
• Change and configuration management.
• Effective incident and problem management.
• Improving communication and collaboration.
• Increasing customer satisfaction.

Basic Informations

We have been developing information systems (IS) for leading companies in the Czech and European market for more than 30 years. We support the success of new business plans by using innovative and smart software solutions tailored to our customers’ needs, instead of conventional procedures. When designing an IS, we take advantage of our thorough knowledge of information technologies (IT) as well as long-term experience from various business areas, knowledge of our clients’ IT environment and standards, and teamwork skills. Thanks to this approach, our customers receive truly innovative and smart solutions that enable them to simplify, speed up, and increase the efficiency of processes.

Key Principles

The company's management utilizes current results to enhance service quality, increase process efficiency, and ensure continuous improvement both at companies management level and the level of managing projects and support processes. This leads to increased customer satisfaction. The company applies its current results and new insights to continuously improve its products. Corrective and preventive actions are taken as needed to improve performance outcomes. All co-workers are involved in the improvement process. Each co-workers's activities are evaluated to motivate further engagement and effort.The aim of Information Security Management is to effectively manage information security in all activities related to the services. The information security policy offers a general framework for the development of security rules and individual security policies of the organization as well as effective security management practices, and ensures the protection of information confidentiality, integrity and availability both in the internal communication of the company and its outside communication with the general public. The protected items include any data and information carriers such as written materials and documents, magnetic media – diskettes and hard drives, optical data (memory) media, computer memories, personal diaries etc. The Information Security Policy is approved by the Security Forum. It is available to employees and customers of the company on UU.

The purpose of Supplier Relationship Management is managing suppliers to ensure the provision of continuous, high-quality services.When the services are provided using suppliers, the company has to be able to prove the supplier management processes are being complied with. The requirements, scope and level of service and communication processes provided by the supplier are documented and approved by all parties. For each supplier, a responsible Contract Manager is appointed. As the service is being provided, the responsible manager monitors and evaluates the efficiency of the service, with respect to the set target service levels.

Configuration Management defines and manages individual elements of the services and infrastructure, and maintains precise configuration information. Configuration items are all base elements (source code, documentation, a supplied HW component, etc.) created in relation to a specific product and carrying information of being related to this product. Configuration Management provides a methodology for identification and version tracking of identifiable service and infrastructure elements, to ensure an adequate level of management appropriate for the business needs, failure risk and importance of the service.

All changes are evaluated, approved, implemented and revised in an organized manner. Change requests are evaluated for risk, impact and benefit to the business. Should the change implementation process fail, the change management process includes a method to either repair or restore everything back to the original state.

Release Management Process aims to supply, distribute and track one or more changes included in a release to a production environment. The individual forms of systems release are planned. The Release Management Process is integrated with the processes of configuration and change management and secures the sharing of required information with the event management process. Should the release implementation process fail, the release process includes a method to either repair or restore the release back to the original state.

These key principles also define the Code of Conduct, which is binding for all company's co-workers. The main purpose of this Code of Conduct is to adhere to generally accepted ethical principles, refrain from any type of infringement, reduce the risk of criminal liability for the company, as well as prevent the commission of crime.

Competencies and review of the Policy

The ITSM policy is reviewed annually by the company's top management as part of continuous improvement.

The ITSM manager is entrusted with the company's management. The ITSM manager has the appropriate resources allocated to him and is directly responsible to the company's management.

The environmental and sustainability Policy is the foundational document of the Environment Management System (EMS) and is defined by the company's top management in cooperation with our co-workers. Our goal is to achieve a long-term sustainable business, maximizing customer satisfaction while respecting the needs of our co-workers and stakeholders and minimizing the environmental footprint.

Management Statement

In accordance with the requirements of the ISO 14001 standard, The company's management has declared this Policy as its commitment. Management's intention is to adhere to the principles of the EMS Policy and the EMS system as such. Furthermore, its supports EMS goals based on the Company's Strategy and Vision, ensures appropriate processes necessary for EMS management and constantly improves this system.

Goals of the Policy

The main goals of the Policy are:

• Compliance with environmental regulations and standards.
• Prevention of environmental pollution by reducing waste production and sorting waste.
• Utilization of green energy, renewable resources, and materials.
• Education and training of co-workers.
• Creation of smart solutions.

Basic Informations

Company eliminates potential hazards and minimizes threats to the environment in our business activities. Our goal is to reduce the impact on the environment not only by ourselves but by our clients, partners and suppliers as well. During the ISO 14001 certification process, we have declared and proved that company has established such a management system that ensures the protection of the environment, long-term sustainability of our business and fulfillment of all legislative requirements concerning the protection of the environment. 

Key Principles

The principles of sustainability and environmental protection are an integral part of thinking, behaviour and work habits of all our co-workers, partners and suppliers. Therefore we lead our co-workers and suppliers to realize how their activities contribute to the sustainability of our business and to the protection of environment. The competence and awareness of our co-workers is increased by regular trainings, e-courses and educational campaigns. We are developing the culture of sustainability as an essential part of our work and decision making. Our management leadership is an authority and inspiration for our co-workers, partners, suppliers and even customers.

The protection of environment, including the prevention of pollution, is one of our top priorities. Therefore we only use the safe and proven technologies that pose no threat to the environment. Our company strives to minimise waste – using offices in buildings with a low environmental impact and encouraging resource saving and responsible waste disposal. We encourage the use of electric cars among our employees as well as the overall transition to e-mobility. Our electrical appliances and vehicles are maintained with minimum environmental impact by professional service providers. We assess the environmental and sustanability aspects of our products and services throughout their entire lifecacle. It is our objective to achieve not only the sustainability of our business but also help our customer achieve the same, by delivering efficient IT solutions for energy management, e-mobility or paperwork reduction.

We meet all legal requirements concerning the environmental protection, the legal compliance is a matter-of-course in all our activities. Therefore we keep track of all our stakeholders, their requirements and expectations, we are actively monitoring the new legislature and we act according to internationally recognized industry practices. The fulfullment of all legal obligations we require and observe not only with our co-workers but with our suppliers and partners.

The sustainability and environmental protection are an integral part of our managment system. The environmental requirements are a natural part of our processes and activities and help us to fulfill our mission which is the social responsibility of all aspects of our business. We make sure that there are sufficient resources for this purpose, especially qualified and motivated staff, necessary IT systems and sufficient financing. We set down clear goals that we transparently communicate and evaluate. We use audits to identify and assess potential risks on a regular basis, in order to adopt measures to protect the environment. We continually improve the system of environmental management in line with the industry best practices.

We require the same approach to sustainability and environmental protection from our suppliers. When selecting the suppliers and establishing partnerships, we take into account their attitudes towards the environment and sustanability. We promote that also our suppliers, partners and clients only use safe, proven and environmentt-fiendly technologies. Also the co-workers of our suppliers and partners must be personally liable for legal compliance and the environmental protection must become an integral part of their thinking, behaviour and work habits. We support our suppliers to understand the impacts of their activities on the environment and help them imrove their performance by establising the environmental nad quality management systems.

These key principles also define the Code of Conduct, which is binding for all company's co-workers. The main purpose of this Code of Conduct is to adhere to generally accepted ethical principles, refrain from any type of infringement, reduce the risk of criminal liability for the company, as well as prevent the commission of crime.

Sustainability

The long-term sustainability of our business is our top priority. It is not only the sustainable operation of company but also the products and solutions that we build and deliver to our customers, helping them achieve the same. You can find out more at Smart and Sustainable Solutions.

Competencies and review of the Policy

The EMS Policy is reviewed annually by the company's top management as part of continuous improvement.

The EMS manager is entrusted with the company's management. The EMS manager has the appropriate resources allocated to him and is directly responsible to the company's management.

Definition of the Policy

The quality Policy is the foundational document of the Quality Management System (QMS) and is defined by the company's top management in cooperation with our co-workers in an effort to maximize customer satisfaction while respecting the needs of its co-workers and other stakeholders by establishing and adhering basic rules.

Management Statement

In accordance with the requirements of the ISO 9001 standard, The company's management has declared the QMS Policy as its commitment. Management's intention is to adhere to the principles of the QMS Policy and the QMS system as such. Furthermore, it supports QMS goals based on the Company's Strategy and Vision, ensures appropriate processes necessary for QMS management and constantly improves this system.

Goals of the Policy

The main goals of the Policy are:

• Improving the quality of products and services.
• Increasing the efficiency of processes.
• Training and development of co-workers.
• Increasing customer satisfaction.
• Support for continuous improvement.

Basic Informations

The company is a renowned European company providing the largest information systems and solutions in the area of information and communication technologies. We are focused on providing solutions, which provide a high added value while also delivering a competitive business advantage to its clients. We have been serving our clients since 1990 and over the years, we have developed a number of high-end, large-scale solutions, which are being used to serve the IT needs of important companies in many of the key sectors of the economy. We have the best references from companies in banking, insurance, energy and utilities, communication and media, manufacturing, trade and the government. We take care that our products and services comply with demanding requirements - quality, image, effectiveness.

• Integration – We provide solutions for business needs and information system integration.
• Building Up – We design and implement large-scale information systems that meet the business requirements of the customer and give the necessary support in their business.
• Operation – We secure the operation of information systems and the necessary supervision and management of IT infrastructure, we ensure the availability of IT functionality for users.
• First Line Support – We provide effective and immediate assistance to users of information systems with solutions to known issues including the provision of alternatives.
• Second Line Support – We guarantee solutions to problems arising from the use of an information system and provide support to deal with new and non-standard operation tasks. 
• Infrastructure – We provide a comprehensive supply network and communication infrastructure, computer security, HW and SW components and cloud.
• Education – We provide standardized catalog training, we create custom courses and implement long-term targeted training programs.
• Consultancy – We help our customers set up business processes and IT environments so that IT solutions support the business plans.

Key Principles

We compiled these 10 key principles sometime around 1994. We try to keep them. These are great principles and they are still valid.

• System approach
• Delegation of competences
• Focus on customers and co-workers
• Target orientation
• Standardization of processes
• Continuous assessment
• Information sharing
• Memory and lessons learned
• Continuous improvement
• Stability and security

These key principles also define the Code of Conduct, which is binding for all company's co-workers. The main purpose of this Code of Conduct is to adhere togenerally accepted ethical principles, refrain from any type of infringement, reduce the risk of criminal liability for the company, as well as prevent the commission of crime.

Competencies and review of the Policy

The QMS Policy is reviewed annually by the company's top management as part of continuous improvement.

The QMS manager is entrusted with the company's management. The QMS manager has the appropriate resources allocated to him and is directly responsible to the company's management.

Introduction

The Company follows a strict zero-tolerance approach towards any form of corruption, meaning any unlawful or unethical conduct.

The Anti-Corruption Policy, together with the Company’s Code of Ethics, forms a core document within the Company’s framework for managing the prevention of corrupt behaviour. Its purpose is to set out the key principles the Company upholds in this area.

This Anti-Corruption Policy applies to all Company coworkers as well as to third parties, in particular the Company’s business partners.

The policy is further supported by internal Company guidelines, including the internal anti-corruption directive through which the Company implements the objectives defined in this Policy, and the internal guideline for business partner due diligence.

The company has a zero tolerance policy towards bribery and crime. It does not tolerate any form of illegal or unethical behaviour and condemns such behaviour.

 ​

Objectives of the Anti-Corruption Policy

The main objective of the Anti-Corruption Policy and its related internal guidelines is to define the required standard of conduct in relation to corruption, bribery, unlawful behaviour and conflicts of interest, in particular by:

• setting binding rules of conduct that the Company and its coworkers must follow when performing their duties or in connection with them, as well as in dealings with third parties;
• establishing the responsibilities of the Company and its coworkers with respect to corruption, bribery, conflicts of interest and general legal compliance;
• expressing the Company’s commitment to its business partners and third parties regarding compliance with legal requirements, the fight against corruption and bribery, and observance of conflict-of-interest rules;
• providing coworkers with information necessary to identify and address issues related to corruption, bribery and conflicts of interest;
• describing the consequences of failing to comply with the Company’s anti-corruption requirements;
• informing the Company’s business partners of the principles of the Company’s anti-corruption management system and requiring adherence to the same standards.

Additional specific objectives are regularly defined in cooperation with the Company’s management and are monitored and evaluated.

The primary objectives of the Company’s anti-corruption management system include setting mandatory rules for the prevention of corruption and bribery, defining rules on conflicts of interest, and establishing the responsibilities of coworkers, their obligation to comply with these principles, and the consequences of non-compliance.

 ​

Anti-Corruption Policy Principles

In accordance with general ethical principles and within the scope of its business activities, the Company always acts in compliance with legal regulations and ethical standards and rejects any form of corruption. The Company maintains a zero-tolerance policy toward corruption and bribery. For this reason, the Company does not tolerate any form of corruption, including bribery and extortion

The Company ensures compliance with legal obligations regarding the anti-corruption management system and measures against the Company’s criminal liability.

The Company guarantees the continuous improvement of the anti-corruption management system within the Company. The anti-corruption policy is reviewed at least once a year by the Company’s management.

The primary guarantors of the anti-corruption policy are the members of the Company’s statutory body, who are responsible for implementing the anti-corruption policy into the Company’s processes, for fulfilling its objectives, and for monitoring and reviewing the achievement of these objectives.

To ensure impartial, fair, and objective investigations related to the anti-corruption policy, the position of compliance officer has been established to oversee compliance with anti-corruption rules.

The Company commits to:

always acting professionally, fairly, and honestly under all circumstances and complying with the legal frameworks and regulations of all countries in which it operates;

to promote an effective system for combating corruption and bribery.

The Company expects its employees to always act in accordance with the anti-corruption policy, legal regulations, internal company regulations, ethical standards, and good morals in the course of their work, while maintaining professionalism and the highest level of professional care.

Employees are required, to the extent possible, to ensure compliance with the defined provisions and, where applicable, with equivalent or comparable regulations issued by third parties with whom the Company maintains business relationships (suppliers, customers, partners, non-profit organizations, etc.), and which require this commitment within the framework of their relationship with the Company, provided that they have been duly informed of such requirements.

The Company expects its business partners to adopt a similar zero-tolerance approach to corruption and bribery and to familiarize themselves with the Company’s anti-corruption policy.

 ​

Reporting Violations of Anti-Corruption Rules

The Company encourages its coworkers and third parties to report any suspected violations of anti-corruption rules. The Company provides full support to coworkers and third parties in doing so. Reports may be made, among other options, to the statutory body or through the (Compliance Officer) ​Compliance line, either under one’s name or anonymously, in accordance with the reporting system described at ​Information about the Unicorn System Group's reporting system.

The Company treats any breach of anti-corruption rules with utmost seriousness and applies appropriate consequences for each violation.

Retaliation against individuals who submit a report is strictly prohibited.